Skip to content
OpenAdvisories

Vendor

D-Link

857 known vulnerabilities.

Products

DNS-320 59 DNS-340L 56 DAP-2622 54 DNS-325 50 DNS-327L 50 DNS-320L 49 DNS-345 49 DNS-320LW 48 DIR-605L 45 DNS-120 44 DNR-202L 44 DNS-315L 44 DNS-321 44 DNR-322L 44 DNS-323 44 DNS-326 44 DNR-326 44 DNS-343 44 DNS-726-4 44 DNS-1100-4 44 DNS-1200-05 44 DNS-1550-04 44 DAP-1325 37 DIR-823X 31 DIR-619L 26 G416 23 DIR-X3260 23 DWR-M960 22 DI-8100 22 DWR-M961 20 DIR-619L B1 18 DWR-M920 18 DIR-3040 17 DIR-513 17 DIR-2150 17 DIR-825 17 DIR-816 16 D-View 15 DIR-1935 15 DAR-7000 14
All Critical High Medium Low Exploited only Public exploit

857 results · Feed

  • Medium 6.8
    CVE-2023-41222

    D-Link DIR-3040 prog.cgi SetWan2Settings Stack-Based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DIR-3040 prog.cgi SetWan2Settings Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-3040 routers. Authentication is re…

    D-Link DIR-3040 Network devices
  • Medium 6.8
    CVE-2023-51631

    D-Link DIR-X3260 prog.cgi SetUsersSettings Stack-based Buffer Overflow Remote Code Execution Vulnerability

    D-Link DIR-X3260 prog.cgi SetUsersSettings Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authentication is…

    D-Link DIR-X3260 Network devices
  • Medium 5.3
    CVE-2024-3274 Scanner template EPSS 33%

    D-Link DNS-320L/DNS-320LW/DNS-327L HTTP GET Request info.cgi information disclosure

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability has been found in D-Link DNS-320L, DNS-320LW and DNS-327L up to 20240403 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/info.cgi of the component H…

    D-Link DNS-327L DNS-320L DNS-320LW Network devices
  • High 7.3
    CVE-2024-3273 Exploited Public exploit Scanner template EPSS 100%

    D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi command injection

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L up to 20240403. Affected is an unknown function of the file /cgi-bin/nas_sharing.cgi of the component HTTP GET Requ…

    D-Link DNS-340L DNS-325 DNS-327L Network devices
    KEV Apr 11, 2024
  • Critical 9.8
    CVE-2024-3272 Exploited Public exploit Scanner template EPSS 98%

    D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi hard-coded credentials

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as very critical, has been found in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L up to 20240403. This issue affects some unknown processing of the file /cgi-bin/nas_sharing.cgi of the co…

    D-Link DNS-340L DNS-325 DNS-327L Network devices
    KEV Apr 11, 2024
  • High 7.5
    CVE-2024-1786

    D-Link DIR-600M C1 Telnet Service buffer overflow

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, has been found in D-Link DIR-600M C1 3.08. Affected by this issue is some unknown functionality of the component Telnet Service. The manipulation of the argument username leads…

    D-Link DIR-600M C1 Network devices
  • Medium 4.7
    CVE-2024-0921 EPSS 38%

    D-Link DIR-816 A2 Web Interface setDeviceSettings os command injection

    A vulnerability has been found in D-Link DIR-816 A2 1.10CNB04 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /goform/setDeviceSettings of the component Web Interface. The manipulation of the argument statusc…

    D-Link DIR-816 A2 Network devices
  • Critical 9.6
    CVE-2024-23625

    D-Link DAP-1650 SUBSCRIBE Callback Command Injection Vulnerability

    A command injection vulnerability exists in D-Link DAP-1650 devices when handling UPnP SUBSCRIBE messages. An unauthenticated attacker can exploit this vulnerability to gain command execution on the device as root.

    D-Link DAP-1650 Network devices
  • Critical 9.6
    CVE-2024-23624

    D-Link DAP-1650 gena.cgi SUBSCRIBE Command Injection Vulnerability

    A command injection vulnerability exists in the gena.cgi module of D-Link DAP-1650 devices. An unauthenticated attacker can exploit this vulnerability to gain command execution on the device as root.

    D-Link DAP-1650 Network devices
  • Medium 5.3
    CVE-2024-0769 Exploited EPSS 83%

    D-Link DIR-859 HTTP POST Request hedwig.cgi path traversal

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DIR-859 1.06B01. It has been rated as critical. Affected by this issue is some unknown functionality of the file /hedwig.cgi of the component HTTP POST Request Handler. The manipulation of th…

    D-Link DIR-859 Network devices
    KEV Jun 25, 2025
  • Medium 5.3
    CVE-2024-0717 EPSS 18%

    D-Link Good Line Router v2 HTTP GET Request devinfo information disclosure

    A vulnerability classified as critical was found in D-Link DAP-1360, DIR-300, DIR-615, DIR-615GF, DIR-615S, DIR-615T, DIR-620, DIR-620S, DIR-806A, DIR-815, DIR-815AC, DIR-815S, DIR-816, DIR-820, DIR-822, DIR-825, DIR-825AC, DIR-825ACF, DIR-825ACG1, DIR-841, D…

    D-Link DIR-2150 DIR-825 DIR-816 Network devices
  • Critical 10.0
    CVE-2023-7163

    D-Link D-View 8 Unauthenticated Probe-Core Server Communication

    A security issue exists in D-Link D-View 8 v2.0.2.89 and prior that could allow an attacker to manipulate the probe inventory of the D-View service. This could result in the disclosure of information from other probes, denial of service conditions due to the …

    D-Link D-View 8 Network devices
  • Medium 5.5
    CVE-2023-6581

    D-Link DAR-7000 workidajax.php sql injection

    A vulnerability has been found in D-Link DAR-7000 up to 20231126 and classified as critical. This vulnerability affects unknown code of the file /user/inc/workidajax.php. The manipulation of the argument id leads to sql injection. The exploit has been disclos…

    D-Link DAR-7000 Network devices
  • High 8.8
    CVE-2023-6580

    D-Link DIR-846 QoS POST deserialization

    A vulnerability, which was classified as critical, was found in D-Link DIR-846 FW100A53DBR. This affects an unknown part of the file /HNAP1/ of the component QoS POST Handler. The manipulation of the argument smartqos_express_devices/smartqos_normal_devices l…

    D-Link DIR-846 Network devices
  • Medium 4.7
    CVE-2023-5322 EPSS 17%

    D-Link DAR-7000 edit_manageadmin.php sql injection

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DAR-7000 up to 20151231. It has been rated as critical. Affected by this issue is some unknown functionality of the file /sysmanage/edit_manageadmin.php. The manipulation of the argument id l…

    D-Link DAR-7000 Network devices
  • Medium 6.3
    CVE-2023-5154 EPSS 15%

    D-Link DAR-8000 changelogo.php unrestricted upload

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability has been found in D-Link DAR-8000 up to 20151231 and classified as critical. This vulnerability affects unknown code of the file /sysmanage/changelogo.php. The manipulation of the argument file_upload leads to u…

    D-Link DAR-8000 Network devices
  • Medium 6.3
    CVE-2023-5153

    D-Link DAR-8000 querysql.php sql injection

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in D-Link DAR-8000 up to 20151231. This affects an unknown part of the file /Tool/querysql.php. The manipulation leads to sql injection. It is possible to initiate th…

    D-Link DAR-8000 Network devices
  • Medium 6.3
    CVE-2023-5152

    D-Link DAR-7000/DAR-8000 importexport.php sql injection

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, has been found in D-Link DAR-7000 and DAR-8000 up to 20151231. Affected by this issue is some unknown functionality of the file /importexport.php. The manipulation of the argum…

    D-Link DAR-7000 DAR-8000 Network devices
  • Medium 6.3
    CVE-2023-5151 EPSS 81%

    D-Link DAR-8000 autheditpwd.php sql injection

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical was found in D-Link DAR-8000 up to 20151231. Affected by this vulnerability is an unknown functionality of the file /autheditpwd.php. The manipulation of the argument hid_id leads to sql i…

    D-Link DAR-8000 Network devices
  • Medium 6.3
    CVE-2023-5150 EPSS 23%

    D-Link DAR-7000/DAR-8000 web.php unrestricted upload

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical has been found in D-Link DAR-7000 and DAR-8000 up to 20151231. Affected is an unknown function of the file /useratte/web.php. The manipulation of the argument file_upload leads to unrestri…

    D-Link DAR-7000 DAR-8000 Network devices
  • Medium 6.3
    CVE-2023-5149 EPSS 21%

    D-Link DAR-7000 userattestation.php unrestricted upload

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DAR-7000 up to 20151231. It has been rated as critical. This issue affects some unknown processing of the file /useratte/userattestation.php. The manipulation of the argument web_img leads to…

    D-Link DAR-7000 Network devices
  • Medium 6.3
    CVE-2023-5148 EPSS 31%

    D-Link DAR-7000/DAR-8000 uploadfile.php unrestricted upload

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DAR-7000 and DAR-8000 up to 20151231. It has been declared as critical. This vulnerability affects unknown code of the file /Tool/uploadfile.php. The manipulation of the argument file_upload …

    D-Link DAR-7000 DAR-8000 Network devices
  • Medium 6.3
    CVE-2023-5147 EPSS 26%

    D-Link DAR-7000 updateos.php unrestricted upload

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DAR-7000 up to 20151231. It has been classified as critical. This affects an unknown part of the file /sysmanage/updateos.php. The manipulation of the argument 1_file_upload leads to unrestri…

    D-Link DAR-7000 Network devices
  • Medium 6.3
    CVE-2023-5146 EPSS 32%

    D-Link DAR-7000/DAR-8000 updatelib.php unrestricted upload

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DAR-7000 and DAR-8000 up to 20151231 and classified as critical. Affected by this issue is some unknown functionality of the file /sysmanage/updatelib.php. The manipulation of the argument fi…

    D-Link DAR-7000 DAR-8000 Network devices
  • Medium 6.3
    CVE-2023-5145 EPSS 34%

    D-Link DAR-7000 licence.php unrestricted upload

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability has been found in D-Link DAR-7000 up to 20151231 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /sysmanage/licence.php. The manipulation of the argument file_u…

    D-Link DAR-7000 Network devices
  • Medium 6.3
    CVE-2023-5144

    D-Link DAR-7000/DAR-8000 updateos.php unrestricted upload

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in D-Link DAR-7000 and DAR-8000 up to 20151231. Affected is an unknown function of the file /sysmanage/updateos.php. The manipulation of the argument file_upload lead…

    D-Link DAR-7000 DAR-8000 Network devices
  • Medium 6.3
    CVE-2023-5143

    D-Link DAR-7000 webmailattach.php Privilege Escalation

    ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, has been found in D-Link DAR-7000 up to 20151231. This issue affects some unknown processing of the file /log/webmailattach.php. The manipulation of the argument table_name lea…

    D-Link DAR-7000 Network devices
  • Critical 9.8
    CVE-2023-5074 Scanner template EPSS 69%

    Authentication Bypass in D-Link D-View 8

    Use of a static key to protect a JWT token used in user authentication can allow an for an authentication bypass in D-Link D-View 8 v2.0.1.28

    D-Link D-View 8 Network devices
  • Medium 5.0
    CVE-2023-4711

    D-Link DAR-8000-10 decodmail.php os command injection

    A vulnerability, which was classified as critical, has been found in D-Link DAR-8000-10 up to 20230819. Affected by this issue is some unknown functionality of the file /log/decodmail.php. The manipulation of the argument file leads to os command injection. T…

    D-Link DAR-8000-10 Network devices
  • Medium 6.3
    CVE-2023-4542 Public exploit Scanner template EPSS 85%

    D-Link DAR-8000-10 sys1.php os command injection

    A vulnerability was found in D-Link DAR-8000-10 up to 20230809. It has been classified as critical. This affects an unknown part of the file /app/sys1.php. The manipulation of the argument cmd with the input id leads to os command injection. It is possible to…

    D-Link DAR-8000-10 Network devices
  • Critical 9.8
    CVE-2023-32224

    D-Link DSL-224 firmware version 3.0.10 CWE-307: Improper Restriction of Excessive Authentication Attempts

    D-Link DSL-224 firmware version 3.0.10 CWE-307: Improper Restriction of Excessive Authentication Attempts

    D-Link DSL-224 firmware version 3.0.10 Network devices
  • High 8.8
    CVE-2023-32223

    D-Link DSL-224 firmware version 3.0.10 post authentication command execution

    D-Link DSL-224 firmware version 3.0.10 allows post authentication command execution via an unspecified method.

    D-Link DSL-224 firmware version 3.0.10 Network devices
  • Critical 9.8
    CVE-2023-32222

    D-Link DSL-G256DG firmware version vBZ_1.00.27 Authentication Bypass

    D-Link DSL-G256DG version vBZ_1.00.27 web management interface allows authentication bypass via an unspecified method.

    D-Link DSL-G256DG firmware version vBZ_1.00.27 Network devices
  • High 8.8
    CVE-2022-3210

    This vulnerability allows network-adjacent attackers to execute arbitrary commands on affected installations of D-Link …

    D-Link DIR-2150 Network devices
  • Medium 6.8
    CVE-2022-43624

    This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-…

    D-Link DIR-1935 Network devices
  • High 8.8
    CVE-2022-43644

    This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-…

    D-Link DIR-825 Network devices
  • High 8.8
    CVE-2022-43643

    This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-…

    D-Link DIR-825 Network devices
  • Medium 6.8
    CVE-2022-43629

    This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-…

    D-Link DIR-1935 Network devices
  • High 8.8
    CVE-2022-43647

    This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-…

    D-Link DIR-825 Network devices
  • Medium 6.8
    CVE-2022-43619

    This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-…

    D-Link DIR-1935 Network devices